« Volver al listado

CVE-2026-97973

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

net: macb: destroy the phylink instance on the probe error path

macb_mii_init() creates a phylink instance on both of its success paths, but the probe unwind frees the netdev without destroying it, so a failing macb_alloc_tieoff() or register_netdev() leaks the instance.

Destroy it at err_out_unregister_mdio, which is only reachable once macb_mii_init() has succeeded, so bp->phylink is valid there.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-97973",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0",
              "lessThan": "0112aa02c7847314be599d68783d50c7e228a694",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0",
              "lessThan": "c1de1e7b51ab2531f564b39b51998c3d71caccd7",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0",
              "lessThan": "23b6a44ffea1c54a4232aa86ee470b21422a8cc5",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0",
              "lessThan": "e92a45b872b035c79acde8dd0da096a72b61ff2f",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0",
              "lessThan": "8558e3195664113c14a4d8fcf221b3caff41fed1",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0",
              "lessThan": "7d059f390750152b9bd69df934198651b94fc26d",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/net/ethernet/cadence/macb_main.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.5"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "5.5",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "6.1.189",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.158",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.111",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.53",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.7",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc3",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/net/ethernet/cadence/macb_main.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-25T11:17:25.203",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/0112aa02c7847314be599d68783d50c7e228a694",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/23b6a44ffea1c54a4232aa86ee470b21422a8cc5",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/7d059f390750152b9bd69df934198651b94fc26d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/8558e3195664113c14a4d8fcf221b3caff41fed1",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c1de1e7b51ab2531f564b39b51998c3d71caccd7",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e92a45b872b035c79acde8dd0da096a72b61ff2f",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: macb: destroy the phylink instance on the probe error path\n\nmacb_mii_init() creates a phylink instance on both of its success paths,\nbut the probe unwind frees the netdev without destroying it, so a failing\nmacb_alloc_tieoff() or register_netdev() leaks the instance.\n\nDestroy it at err_out_unregister_mdio, which is only reachable once\nmacb_mii_init() has succeeded, so bp->phylink is valid there."
    }
  ],
  "lastModified": "2026-10-03T11:18:21.817",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}